Lucene search

PRIOn knowledge basePRION:CVE-2013-6177

HistoryNov 21, 2013 - 4:40 a.m.

Directory traversal

2013-11-2104:40:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

50.9%

JSON

Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allows remote authenticated users to read arbitrary files by leveraging xDashboard access.

CPENameOperatorVersion
document_sciences_xpressioneq4.2
document_sciences_xpressioneq4.5
document_sciences_xpressioneq4.1 sp1
document_sciences_xpressioneq4.1 sp1
document_sciences_xpressioneq4.5
document_sciences_xpressioneq4.2
document_sciences_xpressioneq4.1 sp1
document_sciences_xpressioneq4.2
document_sciences_xpressioneq4.5

Name	Operator	Version
document_sciences_xpression	eq	4.2
document_sciences_xpression	eq	4.5
document_sciences_xpression	eq	4.1 sp1
document_sciences_xpression	eq	4.1 sp1
document_sciences_xpression	eq	4.5
document_sciences_xpression	eq	4.2
document_sciences_xpression	eq	4.1 sp1
document_sciences_xpression	eq	4.2
document_sciences_xpression	eq	4.5

References

archives.neohapsis.com/archives/bugtraq/2013-11/0095.html

packetstormsecurity.com/files/124070/EMC-Document-Sciences-xPression-XSS-CSRF-Redirect-SQL-Injection.html

www.kb.cert.org/vuls/id/346982

www.securitytracker.com/id/1029384

6.8 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

50.9%

JSON

Related for PRION:CVE-2013-6177